Lucene search
+L

1578 matches found

UbuntuCve
UbuntuCve
•added 2022/08/30 7:15 a.m.•36 views

CVE-2021-46837

respjsipt38 in Sangoma Asterisk 16.x before 16.16.2, 17.x before 17.9.3, and 18.x before 18.2.2, and Certified Asterisk before 16.8-cert7, allows an attacker to trigger a crash by sending an m=image line and zero port in a response to a T.38 re-invite initiated by Asterisk. This is a re-occurrenc...

6.5CVSS6.6AI score0.04379EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2022/08/22 3:15 p.m.•10 views

CVE-2022-2593

The Better Search Replace WordPress plugin before 1.4.1 does not properly sanitise and escape table data before inserting it into a SQL query, which could allow high privilege users to perform SQL Injection attacks...

7.2CVSS7.1AI score0.01332EPSS
SaveExploits2References2
NVD
NVD
•added 2022/08/22 3:15 p.m.•45 views

CVE-2022-2593

The Better Search Replace WordPress plugin before 1.4.1 does not properly sanitise and escape table data before inserting it into a SQL query, which could allow high privilege users to perform SQL Injection attacks...

7.2CVSS0.01332EPSS
SaveExploits2References1
OSV
OSV
•added 2022/08/22 3:15 p.m.•16 views

CVE-2022-2593

The Better Search Replace WordPress plugin before 1.4.1 does not properly sanitise and escape table data before inserting it into a SQL query, which could allow high privilege users to perform SQL Injection attacks...

7.2CVSS5.9AI score0.01332EPSS
SaveExploits2References1
Prion
Prion
•added 2022/08/22 3:15 p.m.•35 views

Sql injection

The Better Search Replace WordPress plugin before 1.4.1 does not properly sanitise and escape table data before inserting it into a SQL query, which could allow high privilege users to perform SQL Injection attacks...

5.8CVSS7.1AI score0.01332EPSS
SaveExploits2References1Affected Software1
CVE
CVE
•added 2022/08/22 3:04 p.m.•79 views

CVE-2022-2593

Summary: CVE-2022-2593 affects the WordPress plugin Better Search Replace, prior to version 1.4.1. The vulnerability arises from improper sanitization and escaping of table data before insertion into SQL queries, potentially enabling high-privilege users to perform SQL injection. The issue is doc...

7.2CVSS7.1AI score0.01332EPSS
SaveExploits2References1Affected Software1
Cvelist
Cvelist
•added 2022/08/22 3:04 p.m.•52 views

CVE-2022-2593 Better Search and Replace < 1.4.1 - Admin+ SQLi

The Better Search Replace WordPress plugin before 1.4.1 does not properly sanitise and escape table data before inserting it into a SQL query, which could allow high privilege users to perform SQL Injection attacks...

7.4AI score0.01332EPSS
SaveExploits2References1
CNNVD
CNNVD
•added 2022/08/22 12:00 a.m.•13 views

WordPress plugin Better Search Replace SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A SQL injection vulnerability exists in the...

7.2CVSS7.3AI score0.01332EPSS
SaveExploits2References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/08/22 12:00 a.m.•2 views

CVE-2022-2593: Improper Neutralization of Special Elements used in an SQL Command

The Better Search Replace WordPress plugin before 1.4.1 does not properly sanitise and escape table data before inserting it into a SQL query, which could allow high privilege users to perform SQL Injection attacks...

7.2CVSS7.3AI score0.01332EPSS
SaveExploits2References2
OSV
OSV
•added 2022/08/18 7:15 p.m.•14 views

AZL-10595 CVE-2022-2625 affecting package postgresql for versions less than 14.5-1

A vulnerability was found in PostgreSQL. This attack requires permission to create non-temporary objects in at least one schema, the ability to lure or wait for an administrator to create or update an affected extension in that schema, and the ability to lure or wait for a victim to use the objec...

8CVSS6.8AI score0.01908EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2022/08/18 7:15 p.m.•5 views

CVE-2022-2625

A vulnerability was found in PostgreSQL. This attack requires permission to create non-temporary objects in at least one schema, the ability to lure or wait for an administrator to create or update an affected extension in that schema, and the ability to lure or wait for a victim to use the objec...

8CVSS6.9AI score0.01908EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/08/18 12:00 a.m.•5 views

CVE-2022-2625: Improperly Controlled Modification of Dynamically-Determined Object Attributes

A vulnerability was found in PostgreSQL. This attack requires permission to create non-temporary objects in at least one schema, the ability to lure or wait for an administrator to create or update an affected extension in that schema, and the ability to lure or wait for a victim to use the objec...

8CVSS7.2AI score0.01908EPSS
SaveExploits0References3
PostrgeSql
PostrgeSql
•added 2022/08/11 12:00 a.m.•87 views

Vulnerability in core server (CVE-2022-2625)

Extension scripts replace objects not belonging to the extension Some extensions use CREATE OR REPLACE or CREATE IF NOT EXISTS commands. Some don't adhere to the documented rule to target only objects known to be extension members already. An attack requires permission to create non-temporary...

8CVSS7.4AI score0.01908EPSS
SaveExploits0References1Affected Software1
Patchstack
Patchstack
•added 2022/08/01 12:00 a.m.•35 views

WordPress Better Search Replace plugin <= 1.4 - Authenticated SQL Injection (SQLi) vulnerability

Authenticated SQL Injection SQLi vulnerability discovered by Christiaan Swiers in WordPress Better Search Replace plugin versions = 1.4. Solution Update the WordPress Better Search Replace plugin to the latest available version at least 1.4.1...

7.2CVSS3.3AI score0.01332EPSS
SaveExploits2References1Affected Software1
WPVulnDB
WPVulnDB
•added 2022/08/01 12:00 a.m.•28 views

Better Search and Replace < 1.4.1 - Admin+ SQLi

The plugin does not properly sanitise and escape table data before inserting it into a SQL query, which could allow high privilege users to perform SQL Injection attacks PoC POST /wp-admin/tools.php?page=better-search-replace&bsr-ajax;=processsearchreplace HTTP/1.1 Accept: application/json,...

7.2CVSS1.4AI score0.01332EPSS
SaveExploits2Affected Software1
OSV
OSV
•added 2022/07/05 12:00 a.m.•16 views

UBUNTU-CVE-2022-34481

In the nsTArrayImpl::ReplaceElementsAt function, an integer overflow could have occurred when the number of elements to replace was too large for the container. This vulnerability affects Firefox 102, Firefox ESR 91.11, Thunderbird 102, and Thunderbird 91.11...

8.8CVSS7.3AI score0.00783EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
•added 2022/07/04 12:00 a.m.•11 views

The vulnerability of the `nsTArray_Impl::ReplaceElementsAt()` function in Thunderbird email clients, Firefox browsers, and Firefox ESR allows a malicious actor to execute arbitrary code.

The vulnerability of the nsTArrayImpl::ReplaceElementsAt function in Thunderbird email clients, Firefox browsers, and Firefox ESR browsers is related to integer overflow. Exploiting this vulnerability could allow an attacker to execute arbitrary code remotely...

6.4CVSS7.5AI score0.00783EPSS
SaveExploits0References13Affected Software8
RedHat Linux
RedHat Linux
•added 2022/06/30 11:27 p.m.•30 views

Mozilla: Potential integer overflow in ReplaceElementsAt

The Mozilla Foundation Security Advisory describes this flaw as: In the nsTArrayImpl::ReplaceElementsAt function, where an integer overflow could occur when the number of elements to replace was too large for the container...

8.8CVSS7.4AI score0.00783EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
•added 2022/06/30 11:27 p.m.•14 views

Mozilla: Potential integer overflow in ReplaceElementsAt

The Mozilla Foundation Security Advisory describes this flaw as: In the nsTArrayImpl::ReplaceElementsAt function, where an integer overflow could occur when the number of elements to replace was too large for the container...

8.8CVSS7.4AI score0.00783EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
•added 2022/06/30 10:01 p.m.•14 views

Mozilla: Potential integer overflow in ReplaceElementsAt

The Mozilla Foundation Security Advisory describes this flaw as: In the nsTArrayImpl::ReplaceElementsAt function, where an integer overflow could occur when the number of elements to replace was too large for the container...

8.8CVSS7.4AI score0.00783EPSS
SaveExploits0References6
Rows per page
Query Builder